Snowflake customers / UNC5537
Kept standing passwords, no MFA, and years of unrotated credentials
Stolen passwords stayed valid for up to four years against accounts without MFA or network allow lists; most of the damage came from data the customers had concentrated in one warehouse.